Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2025-24411

šŸ—“ļøĀ 11 Feb 2025Ā 17:37:51Reported byĀ adobeTypeĀ 
cve
Ā cvešŸ”—Ā web.nvd.nist.govšŸ“°ļøĀ 1Ā Media mentionsšŸ‘Ā 81Ā Views

Adobe Commerce versions prior to 2.4.7-beta1 have an Improper Access Control vulnerability.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2025-24411
11 Feb 202518:15
ā€“attackerkb
BDU FSTEC		The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, related to access control errors, allows attackers to gain unauthorized access to protected information.
13 Feb 202500:00
ā€“bdu_fstec
Circl		CVE-2025-24411
11 Feb 202518:19
ā€“circl
CNNVD		Adobe Commerce č®æé—®ęŽ§åˆ¶é”™čÆÆę¼ę“ž
11 Feb 202500:00
ā€“cnnvd
CNVD		Adobe Commerce Security Bypass Vulnerability (CNVD-2025-03635)
17 Feb 202500:00
ā€“cnvd
Cvelist		CVE-2025-24411 Adobe Commerce | Improper Access Control (CWE-284)
11 Feb 202517:37
ā€“cvelist
EUVD		EUVD-2025-3692
3 Oct 202520:07
ā€“euvd
Github Security Blog		Magento Improper Access Control vulnerability
11 Feb 202518:31
ā€“github
NCSC		Vulnerabilities fixed in Adobe Commerce and Magento
13 Feb 202506:46
ā€“ncsc
NVD		CVE-2025-24411
11 Feb 202518:15
ā€“nvd
Rows per page
NVD
Vulners
Node
adobecommerceRange<2.4.4
OR
adobecommerceMatch2.4.4-
OR
adobecommerceMatch2.4.4p1
OR
adobecommerceMatch2.4.4p10
OR
adobecommerceMatch2.4.4p11
OR
adobecommerceMatch2.4.4p2
OR
adobecommerceMatch2.4.4p3
OR
adobecommerceMatch2.4.4p4
OR
adobecommerceMatch2.4.4p5
OR
adobecommerceMatch2.4.4p6
OR
adobecommerceMatch2.4.4p7
OR
adobecommerceMatch2.4.4p8
OR
adobecommerceMatch2.4.4p9
OR
adobecommerceMatch2.4.5-
OR
adobecommerceMatch2.4.5p1
OR
adobecommerceMatch2.4.5p10
OR
adobecommerceMatch2.4.5p2
OR
adobecommerceMatch2.4.5p3
OR
adobecommerceMatch2.4.5p4
OR
adobecommerceMatch2.4.5p5
OR
adobecommerceMatch2.4.5p6
OR
adobecommerceMatch2.4.5p7
OR
adobecommerceMatch2.4.5p8
OR
adobecommerceMatch2.4.5p9
OR
adobecommerceMatch2.4.6-
OR
adobecommerceMatch2.4.6p1
OR
adobecommerceMatch2.4.6p2
OR
adobecommerceMatch2.4.6p3
OR
adobecommerceMatch2.4.6p4
OR
adobecommerceMatch2.4.6p5
OR
adobecommerceMatch2.4.6p6
OR
adobecommerceMatch2.4.6p7
OR
adobecommerceMatch2.4.6p8
OR
adobecommerceMatch2.4.7-
OR
adobecommerceMatch2.4.7p1
OR
adobecommerceMatch2.4.7p2
OR
adobecommerceMatch2.4.7p3
OR
adobecommerceMatch2.4.8beta1
Node
adobecommerce_b2bRange<1.3.3
OR
adobecommerce_b2bMatch1.3.3-
OR
adobecommerce_b2bMatch1.3.3p10
OR
adobecommerce_b2bMatch1.3.3p11
OR
adobecommerce_b2bMatch1.3.4-
OR
adobecommerce_b2bMatch1.3.4p10
OR
adobecommerce_b2bMatch1.3.4p9
OR
adobecommerce_b2bMatch1.3.5-
OR
adobecommerce_b2bMatch1.3.5p7
OR
adobecommerce_b2bMatch1.3.5p8
OR
adobecommerce_b2bMatch1.4.2-
OR
adobecommerce_b2bMatch1.4.2p1
OR
adobecommerce_b2bMatch1.4.2p2
OR
adobecommerce_b2bMatch1.4.2p3
OR
adobecommerce_b2bMatch1.5.0
Node
adobemagentoRange<2.4.4open_source
OR
adobemagentoMatch2.4.4-open_source
OR
adobemagentoMatch2.4.4p1open_source
OR
adobemagentoMatch2.4.4p10open_source
OR
adobemagentoMatch2.4.4p11open_source
OR
adobemagentoMatch2.4.4p2open_source
OR
adobemagentoMatch2.4.4p3open_source
OR
adobemagentoMatch2.4.4p4open_source
OR
adobemagentoMatch2.4.4p5open_source
OR
adobemagentoMatch2.4.4p6open_source
OR
adobemagentoMatch2.4.4p7open_source
OR
adobemagentoMatch2.4.4p8open_source
OR
adobemagentoMatch2.4.4p9open_source
OR
adobemagentoMatch2.4.5-open_source
OR
adobemagentoMatch2.4.5p1open_source
OR
adobemagentoMatch2.4.5p10open_source
OR
adobemagentoMatch2.4.5p2open_source
OR
adobemagentoMatch2.4.5p3open_source
OR
adobemagentoMatch2.4.5p4open_source
OR
adobemagentoMatch2.4.5p5open_source
OR
adobemagentoMatch2.4.5p6open_source
OR
adobemagentoMatch2.4.5p7open_source
OR
adobemagentoMatch2.4.5p8open_source
OR
adobemagentoMatch2.4.5p9open_source
OR
adobemagentoMatch2.4.6-open_source
OR
adobemagentoMatch2.4.6p1open_source
OR
adobemagentoMatch2.4.6p2open_source
OR
adobemagentoMatch2.4.6p3open_source
OR
adobemagentoMatch2.4.6p4open_source
OR
adobemagentoMatch2.4.6p5open_source
OR
adobemagentoMatch2.4.6p6open_source
OR
adobemagentoMatch2.4.6p7open_source
OR
adobemagentoMatch2.4.6p8open_source
OR
adobemagentoMatch2.4.7-open_source
OR
adobemagentoMatch2.4.7p1open_source
OR
adobemagentoMatch2.4.7p2open_source
OR
adobemagentoMatch2.4.7p3open_source
OR
adobemagentoMatch2.4.8beta1open_source
[
  {
    "defaultStatus": "affected",
    "product": "Adobe Commerce",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2.4.8-beta1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Apr 2025 17:18Current
8.4High risk
Vulners AI Score8.4
CVSS 3.18.1
EPSS0.0011
SSVC
CWE-284
adobe commerceimproper access controlsecurity feature bypasslow-privileged attackerunauthorized access
81